CVE-2016-8418
First published: Mon Feb 06 2017(Updated: )
A remote code execution vulnerability in the Qualcomm crypto driver could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Product: Android. Versions: N/A. Android ID: A-32652894. References: QC-CR#1077457.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | <=6.0.1 | |
| Android | ||
| <=6.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=8f8066581a8e575a7d57d27f36c4db63f91ca48f
- https://source.android.com/docs/security/bulletin/2017-02-01 (Advisory)
- http://www.securityfocus.com/bid/96058
- http://www.securitytracker.com/id/1037798
- https://source.android.com/security/bulletin/2017-02-01.html
Frequently Asked Questions
What is the severity of CVE-2016-8418?
CVE-2016-8418 is rated as Critical due to the potential for remote code execution in the kernel context.
How does CVE-2016-8418 affect Android devices?
CVE-2016-8418 affects Android devices running versions up to and including 6.0.1, allowing remote attackers to execute arbitrary code.
What are the potential consequences of CVE-2016-8418 exploitation?
Exploitation of CVE-2016-8418 could result in unauthorized access, data compromise, or complete control over the affected Android device.
How do I fix CVE-2016-8418?
To mitigate CVE-2016-8418, users should update their Android devices to a version that has addressed the vulnerability.
Is CVE-2016-8418 still a risk for my Android device?
If your Android device is running version 6.0.1 or lower and has not been updated, it remains at risk for CVE-2016-8418.
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/event
- agent/last-modified-date
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- version/android/6.0.1